spellbook-setup

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These are personal GitHub repositories that require cloning and running unreviewed Python code and installing lifecycle hooks that will execute automatically (a vector for persistent arbitrary-code execution and data exfiltration), so they should be treated as suspicious until the source and code are audited.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The setup explicitly instructs cloning and installing https://github.com/kid-sid/memory_map.git and then running its server.py / history_hook.py (registered as lifecycle hooks), which means remote code fetched from that URL is executed at runtime and can directly influence agent prompts and behavior.